You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Alex Deparvu (JIRA)" <ji...@apache.org> on 2018/09/25 06:58:00 UTC
[jira] [Updated] (OAK-7778) PasswordUtil#isPlainTextPassword
doesn't validate PBKDF2 scheme
[ https://issues.apache.org/jira/browse/OAK-7778?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alex Deparvu updated OAK-7778:
------------------------------
Fix Version/s: 1.9.8
1.10
> PasswordUtil#isPlainTextPassword doesn't validate PBKDF2 scheme
> ---------------------------------------------------------------
>
> Key: OAK-7778
> URL: https://issues.apache.org/jira/browse/OAK-7778
> Project: Jackrabbit Oak
> Issue Type: Bug
> Components: security-spi
> Reporter: Alex Deparvu
> Assignee: Alex Deparvu
> Priority: Major
> Fix For: 1.10, 1.9.8
>
>
> Support for PBKDF2 was added quite a while back with OAK-697 but it seems it's not really usable due to password validation. PasswordUtil#isPlainTextPassword seems to think PBKDF2 is plain text, so it will not allow any passwords to be set.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)